ci: verify, Trivy scan, and semantic release pipeline
Gitea Actions: compile check, virtual-drone smoke flight validated with DuckDB, read-only SQL gate tests, Trivy vuln and misconfig scans. Pushes to main cut a semantic version from the conventional-commit type and publish a release with a fleet release manifest and source bundle.
This commit is contained in:
@@ -50,3 +50,7 @@ cd simulator && DRONE_COUNT=10 docker compose up
|
||||
# Run the visualization
|
||||
cd prototype && npm install && npm run dev
|
||||
```
|
||||
|
||||
## CI & releases
|
||||
|
||||
Every push runs the pipeline in [`.github/workflows/release.yaml`](.github/workflows/release.yaml): a compile check, a 10-second virtual smoke flight verified with DuckDB, unit tests for the read-only SQL gate, and a Trivy vulnerability/misconfiguration scan. Pushes to `main` then cut a semantic version from the conventional-commit type (`feat:` → minor, `!`/`BREAKING CHANGE` → major, else patch), tag the commit, and publish a release with a **fleet release manifest** (versioned artifact list with checksums — the delivery unit described in [11 — CI/CD & delivery](docs/11-cicd-delivery.md)) plus a source bundle.
|
||||
|
||||
Reference in New Issue
Block a user